Deployment Architecture

How to Disable Splunk from contacting ANY remote sites


During an event at our site in the last 48 hours it became painfully apparent that Splunk contacts different sites on the Internet, in particular Google Analytics. If we have a networking issue like recently this renders Splunk almost completely useless. We want it disabled. Any ideas?

Tags (2)
0 Karma


Disable the application that is calling the external source.

By default, Splunk does not call to the outside world.

If of course you cant disable these app's, use IPTABLES to drop all connections to any not RFC1918 address range.

  • Peter
0 Karma
Get Updates on the Splunk Community!

Index This | A sphere has three, a circle has two, and a point has zero. What is it?

September 2023 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...